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DETAILED ACTION 

1 . This office action is in response to applicant's amendment filed on July 1 5, 201 1 . 

2. Claims 33-60 are pending in this application. 

Response to Arguments 

3. Applicant's arguments filed July 1 5, 201 1 have been considered but they are not 
persuasive. In the remarks applicant argues: 

I) The cited prior art does not teach "binding at least one device to at least 
one user, such that the at least one device is directly linked to the at least one user and 
is indirectly linked to the domain identifier through the at least one user". 

The examiner respectfully disagrees. In the person based Authorized 
Domain (AAPA, page 3) the domain is a set of users that are authorized to access the 
content i.e. the users are directly linked to the domain. In this case, the devices are 
directly linked to the user because the devices are directly used by the user. Also the 
devices are indirectly linked to the domain through the users. Furthermore, AAPA, page 
3, also teaches using a domain identifier to link users and devices with the content. 

Also, Nakahara paragraph 197 teaches that multiple users (father and 
son) can both have access to the same device, but the content access and rights will be 
based on the person i.e. the authorized domain is person based. Therefore, the users 
are directly linked to the domain and the devices are linked to the domain through the 
users. 
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Examiner Notes 

4. Examiner cites particular columns and line numbers in the references as applied 
to the claims below for the convenience of the applicant. Although the specified citations 
are representative of the teachings in the art and are applied to the specific limitations 
within the individual claim, other passages and figures may apply as well. It is 
respectfully requested that, in preparing responses, the applicant fully consider the 
references in entirety as potentially teaching all or part of the claimed invention, as well 
as the context of the passage as taught by the prior art or disclosed by the examiner. 

5. The examiner would also like to note that "the Appellant hereby affirms that a 
transitory propagating signal, is not included within the scope of claim 60". 

Claim Rejections - 35 USC § 103 

6. The following is a quotation of 35 U.S.C. 1 03(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identicaliy disciosed or described as set forth in 

section 1 02 of this title, If the differences between the subject matter sought to be patented and the prior art 
are such that the subject matter as a whole would have been obvious at the time the invention was made to 
a person having ordinary skill In the art to which said subject matter pertains. Patentability shaii not be 
negatived by the manner in which the invention was made. 

7. Claims 33-60 as best understood are rejected under 35 U.S.C. 1 03(a) as being 
unpatentable over Applicant's Admitted Prior Art (AAPA) in pages 1 -4 and Figure 1 of 
the Instant Application in view of Nakahara et al. (US Pre-Grant Publication 

2003/0018491) hereinafter referred to as Nakahara. 
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As per claim 33, 47, and 60, AAPA discloses A method and system of generating 
an Authorized Domain (AD) (AAPA, page 3, teaches generating an authorized 
domain using a hybrid person and device method.), comprising: 

selecting a domain identifier uniquely identifying the Authorized Domain (AAPA, 
page 3, teaches having a Domain Identifier that connects the device and the 
person authorized domain methods.); 

binding at least one user to the domain identifier (AAPA, page 3, teaches 
grouping the users together through a domain users certificate. AAPA, Figure 1, 
teaches binding the user's to the domain identifier. AAPA, page 3, also teaches 
the person based domain where the domain is the list of authorized users I.e. the 
users are bound to the domain identifier.); 

and obtaining a number of devices and an number of users that are authorized to 
access a content item of said Authorized Domain (AAPA, Figure 1, teaches having a 
list containing a list of users and devices that can access the content.), wherein 
the obtaining step comprises: 

binding at least one device to at least one user (AAPA, page 3, teaches 
associating the devices using a domain devices certificate. These devices are 
bound to the users through the domain identifier, as shown in Figure 1.), 

such that the at least one device is directly linked to the at least one user and is 
indirectly linked to the domain identifier through the at least one user (AAPA, page 3, 
also teaches a person based domain where the Authorized Domain Is the set of 
people authorized to access the content. In this situation the user may use any 



Application/Control Number: 10/599,272 Page 5 

Art Unit: 2435 

device i.e. the device directly linlced to the user and the device is indirectly linked 
to the domain through the user.) 

However, AAPA does not specifically disclose having a list that associates users 
with devices. 

Nakahara discloses obtaining or generating a Device Owner List comprising a 
unique identifier for a user and a unique identifier for each device belonging to the user, 
thereby defining that the at least one device is bound to the user, or in that the binding 
of at least one device to at least one user comprises obtaining or generating a Device 
Owner List for each device to be bound, the Device Owner List comprising a unique 
identifier for a user and a unique identifier for a device belonging to the user, thereby 
defining that the device is bound to the user (Nakahara, paragraphs 200-201, teaches 
the authorized devices being on the domain list. Nakahara, paragraphs 75-78, 
also teaches having group information comprising user IDs and function unit IDs 
(of the devices) to determine what access rights the device/user has. Therefore, 
each user has a unique identifier (user ID) and the user created domain list 
(paragraph 201) binds the devices to that specific user.) 

It would have been obvious to one of ordinary skill in the art at the time the 
invention was made to modify the invention of AAPA by adding the teachings of 
Nakahara. AAPA teaches both a hybrid system and a person based system for defining 
an authorized domain. Nakahara teaches allowing multiple users to use the same 
devices and also have different usage restrictions based upon the user of the device 
which is also a person based domain approach. Therefore, it would have been obvious 
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to combine tlie references to result in tine liybrid system of AAPA that uses a more 
person based approach in that the users would be linked to the domain and the devices 
would be linked to the domain through the users (As in the person based authorized 
domain in AAPA page 3). This approach would allow for different user's to have 
different access rights and privileges which is generally known and desirable in the art. 
Adding the features of Nakahara would be applying know techniques to know devices 
ready for improvement to yield predictable results (Nakahara, paragraph 197, teaches 
that both a father and son can use the same device i.e. two users bound to same 
device, but the son will have different access rights to the content.) 

As per claims 34 and 48, AAPA in view of Nakahara discloses wherein each 
device may be bound to only a single user, or each device may be bound to several 
users, where one user is indicated as a primary user for that particular device 
(Nakahara, paragraph 226, teaches having user IDs associated with the 
authorized devices. Therefore, one or more users may be associated with a 
particular device. Nakahara, paragraph 201, teaches a user generating his own 
domain list so that user would be the primary user for those devices.) 

As per claims 35 and 49, AAPA in view of Nakahara discloses further comprising 
importing, on a given device, at least one content item into the Authorized Domain given 
by the domain identifier by automatically binding, by default, the at least one imported 
content item to the single user that the given device is bound to or to the user indicated 
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as primary user for the given device, or binding tine at least one imported content item to 
another user using additional information, when non-default binding is to be used 
(Nakahara, paragraph 197, teaches importing content into the network that only 
particular users/devices can have access to.) 

As per claims 37 and 51 , AAPA in view of Nakahara discloses further comprising 
using at least one of: 

a user Identification device as a personal Authorized Domain manager; a 
personal mobile device as a personal Authorized Domain manager; a mobile phone as 
a personal Authorized Domain manager; and a PDA (personal digital assistant) as a 
personal Authorized Domain manager (Nakahara, paragraph 297-298, teaches the 
user having an IC card containing the PIN to be used with the content usage 
device. This device will manage whether or not the user has access to content 
and, therefore, manage the authorized domain of the user. It would be obvious for 
this IC card to be in some device such as a PDA to allow the user to use the IC 
card in an easier fashion.) 

As per claims 38 and 52, AAPA in view of Nakahara discloses wherein the 
binding of at least one user to the domain identifier comprises obtaining or generating a 
Domain Users List comprising the domain identifier and a unique identifier for a user 
thereby defining that the user is bound to the Authorized Domain (Nakahara, 
paragraphs 77 and 226, teaches having multiple user IDs associated with the 
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authorized domain. Nalcahara, paragraph 197, also teaches distinguishing 
between a father and son on the networl( and determining what rights the user 
has based on who the user is. Therefore, there must be a list of user's with their 
corresponding access rights.) 

As per claims 39 and 53, AAPA in view of Nakahara discloses wherein the 
binding of at least one content item to the Authorized Domain comprises binding a 
content item to a User Right, where said User Right is bound to a user bound to the 
Authorized Domain (Nakahara, paragraph 297, teaches the user purchasing a 
license for the content. A license inherently grants the user the rights that he/she 
has paid for and that the copyright holder will allow. Paragraph 63 teaches 
different access rights for content.) 

As per claims 40 and 54, AAPA in view of Nakahara discloses wherein the User 
Right comprises rights data representing which rights exists in relation to the at least 
one content item bound to the User Right (Nakahara, paragraph 297, teaches the 
user purchasing a license for the content. A license inherently grants the user the 
rights that he/she has paid for and that the copyright holder will allow. Paragraph 
63 teaches different access rights for content.) 

As per claims 41 and 55, AAPA in view of Nakahara discloses further comprising 
controlling access, by a given device being operated by a given user, to a given content 
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item comprising cliecl^ing wlietlier a user, the given content item is linl^ed to, and a 
user, the given device is linl<ed to, belongs to the same Authorized Domain, and 
allowing access for the given user and/or other users via the given device to the content 
Item if so, and/or checking if the given content item is linked to a user belonging to the 
same Authorized Domain as the given user, and allowing access for the given user via 
the given device and/or other devices to the content item if so (Nakahara, paragraphs 
194-197, teaches only granting access to the content if the device is authorized 
and the user is granted access to the content through the usage restriction.) 

As per claims 42 and 56, AAPA in view of Nakahara discloses further comprising 
controlling access, by a given device being operated by a given user, to a given content 
item being bound to the Authorized Domain and having a unique content identifier, 
wherein controlling access comprises: 

checking if the user bound to the given device is bound to the same Authorized 
Domain as the user bound to the content item, by checking if the Domain User List of 
the Authorized Domain comprises: a first user identifier, wherein a Device Owner List 
comprises an identifier of the given device and the first user identifier, and a second 
user identifier, linked to the given content item (Naltahara, paragraphs 194-197, 
teaches granting or restricting access to content based on whether user and 
device authorization requirements are met. AAPA, Figure 1, teaches having the 
device/user certificates. AAPA, Figure 1, teaches having multiple user identifiers 
(P1, P2, etc..) that are linked to the contents (C1, C2, etc.). Figure 1 also teaches 
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having a device list that contains a list of devices that can be used to access the 
content.); 

and allowing access to the given content item by the given device operated by 
any user and/or checking if the Domain User List of the Authorized Domain, that the 
content item is bound to, comprises a user identifier of the given user thereby checking 
if the given user is bound to the same Authorized Domain as the content item, and 
allowing access to the given content item by any device including the given device 
operated by the given user (Nakahara, paragraphs 194-197, teaches granting or 
restricting access to content based on whether user and device authorization 
requirements are met. AAPA, Figure 1, teaches having the device/user 
certificates.) 

As per claims 43 and 57, AAPA in view of Nakahara discloses wherein the 
controlling of access of a given content item comprises checking that the User Right for 
the given content item specifies that the given user has the right to access the given 
content item and only allowing access to the given content item in the affirmative 
(Nakahara, paragraph 63, teaches the license information containing information 
about the usage rights that the user has for the content. Nakahara, paragraphs 
194-197, also teaches only granting access if the user has the appropriate access 
rights.) 
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As per claims 44 and 58, AAPA in view of Nal^aliara discloses wherein every 
content item is encrypted and that a content right is bound to each content item and to a 
User Right, and that the content right of a given content item comprises a decryption 
key for decrypting the given content item (Nakahara, paragraphs 48-50, teaches 
content encryption and decryption Iceys to decrypt the content items.) 

As per claims 45 and 59, AAPA in view of Nakahara discloses wherein the 
Domain Users List is implemented as or included in a Domain Users Certificate, and/or 
the Device Owner List is implemented as or included in a Device Owner Certificate, 
and/or the User Right is implemented as or included in a User Right Certificate 
(Nalohara, paragraphs 198, 249-251, and 258, teaches iicense authentication 
being included in certificates. AAPA, Figure 1, also teaches having certificates.) 

As per claim 46, AAPA in view of Nakahara discloses further comprising binding 
at least one content item to at least one user (Nakahara, paragraphs 194-197, 
teaches usage restrictions for users. Certain content is only available to certain 
users. Therefore, the content is bound to the user. AAPA, Figure 1, also teaches 
having the content bound to a user.) 

As per claims 36 and 50, AAPA in view of Nakahara does not specifically teach 

limiting the number of users. 
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It would have been obvious to one of ordinary skill in the art at the time of the 
invention to provide an Authorized Domain size limitation, where the limitation relates to 
a maximum number of users. Nakahara, paragraph 197, teaches multiple users using 
the same device. Furthermore, AAPA, pages 3-4, teaches limiting the number of 
devices and sessions that are allowed, and AAPA, page 3, also teaches that only a 
limited set of users can be bound to the Authorized Domain. Therefore, it would have 
been obvious to limit the size of the authorized domain by limiting the number of 
authorized users. 



Conclusion 

8. Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to John B. King whose telephone number is (571)270- 
7310. The examiner can normally be reached on Mon. - Fri. 7:30 AM - 4:00 PM est.. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Kim Vu can be reached on (571) 272-3859. The fax phone number for the 
organization where this application or proceeding is assigned is 571 -273-8300. 
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Information regarding tine status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

/John B King/ 
Examiner, Art Unit 2435 

/Kimyen Vu/ 
Supervisory Patent Examiner, Art Unit 2435 



